Icacls executes scripts locally to modify remote server shared folder permissions

In the last article, someone proposed to execute script commands locally to modify remote server shared folder permissions.

In order to perform the above, several conditions need to be met

1. The local computer can access the folder to be modified by the remote shared server.

2. Have the highest permission of the modified folder, that is, (F) ownership, and the minimum permission to modify (M).

3. The folder to be modified and the local computer must be in the same domain control

All of the above conditions are indispensable.

Detailed steps of the operation:

The local computer remotely accesses the shared folder to be modified

Right-click the folder to modify permissions and select the mapping network drive by default, so that you can see a Y: drive letter in your computer.

Let's take a look at the permissions of the following folder.

Fourth, modify the permission of the folder through a simple command, and give the user T1 the right to modify

Icacls y:\ / grant [: r] T1: (OI) (CI) (M) / T

Fifth, through the above command, we can see that the modification is successful. Then we switch to the local

We can see that the modification rights of T1 users have been authorized successfully.

Later, you can write the script requirements you need according to the first two chapters.

VI. Tips for bloggers

When you are doing shared folders, the first-level directory had better only do read-only access, and the second-level directory begins to control the distinction between read and write.